IE öffnet beim surfen selbsständig neue seiten

mina88

so ich ab jetzt Navilog laufen lassen:


Search Navipromo version 3.7.6 began on 01.04.2009 at 20:10:49,62

!!! Warning, this report may include legitimate files/programs !!!
!!! Post this report on the forum you are being helped !!!
!!! Don't continue with removal unless instructed by an authorized helper !!!

Fix running from C:\Program Files\navilog1

Updated on 14.03.2009 at 18h00 by IL-MAFIOSO

Microsoft® Windows Vista™ Home Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU P8400 @ 2.26GHz )
BIOS : 2S Phoenix SecureCore(tm) NB Version 03LE.MP00.20080730.KSY
USER : mina ( Administrator )
BOOT : Normal boot




C:\ (Local Disk) - NTFS - Total:144 Go (Free:114 Go)
D:\ (Local Disk) - NTFS - Total:143 Go (Free:143 Go)
E:\ (CD or DVD)
G:\ (CD or DVD)


Search done in normal mode


*** Search folders in "C:\Windows" ***


*** Search folders in "C:\Program Files" ***


*** Search folders in "c:\progra~2\micros~1\windows\startm~1\programs" ***


*** Search folders in "c:\progra~2\micros~1\windows\startm~1" ***


*** Search folders in "C:\ProgramData" ***


*** Search folders in "c:\users\mina\appdata\roaming\micros~1\windows\startm~1\programs" ***


*** Search folders in "C:\Users\mina\AppData\Local\virtualstore\Program Files" ***

...\Live-Player found !


*** Search folders in "C:\Users\mina\AppData\Local" ***




*** Search folders in "C:\Users\mina\AppData\Roaming" ***


*** Search with Catchme-rootkit/stealth malware detector by gmer ***
for more info : http://www.gmer.net



*** Search with GenericNaviSearch ***
!!! Possibility of legitimate files in the result !!!
!!! Must always be checked before manually deleting !!!

* Scan in "C:\Windows\system32" *

* Scan in "C:\Users\mina\AppData\Local\Microsoft" *

* Scan in "C:\Users\mina\AppData\Local\virtualstore\windows\system32" *

* Scan in "C:\Users\mina\AppData\Local" *



*** Search files ***


C:\Windows\prefetch\LIVE-PLAYER_SETUP.EXE-61E2A8DA.pf found !
C:\Windows\prefetch\LIVE-PLAYER.EXE-C386027A.pf found !

*** Search specific Registry keys ***
!! Following keys are not certainly all infected !!


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"qyqei"="\"c:\\users\\mina\\appdata\\local\\qyqei.exe\" qyqei"


*** Complementary Search ***
(Search specific files)

1)Search new Instant Access files :


2)Heuristic Search :

* In "C:\Windows\system32" :


* In "C:\Users\mina\AppData\Local\Microsoft" :


* In "C:\Users\mina\AppData\Local\virtualstore\windows\system32" :


* In "C:\Users\mina\AppData\Local" :

qyqei.exe found !
qyqei.dat found !
qyqei_nav.dat found !
qyqei_navps.dat found !
qyqei.bat found !

3)Certificates Search :

Egroup certificate not found !
Electronic-Group certificate not found !
Montorgueil certificate not found !
OOO-Favorit certificate not found !
Sunny-Day-Design-Ltd certificate not found !

4)Search others known folders and files :



*** Search completed on 01.04.2009 at 20:39:23,44 ***